Bug 2497735 (CVE-2026-14969)

Summary: CVE-2026-14969 389-ds-base: 389-ds-base: Static initialization vector in AES-CBC/3DES-CBC attribute encryption
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security <prodsec-ir-bot>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: aadhikar, bsmejkal, jachapma, mreynolds, progier, rhel-process-autobot, snegrini, spichugi, tbordaz, vashirov, watson-tool-maintainers
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext blocks.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2497736    
Bug Blocks:    

Description OSIDB Bzimport 2026-07-07 15:36:24 UTC 
A flaw was found in 389-ds-base. The LDBM backend attribute encryption implementation in ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c uses a hardcoded static initialization vector (IV) — 16 bytes of 0x61 — for all AES-CBC-PAD and 3DES-CBC-PAD encryption operations. CBC mode requires a unique, unpredictable IV per encryption operation to provide semantic security. The static IV causes identical plaintext attribute values to produce identical ciphertext, enabling an attacker with privileged read access to the LDBM database files to detect plaintext equality across entries by comparing ciphertext blocks and to facilitate offline cryptanalysis of encrypted attributes.